[strongSwan] OCSP nonce parameter

[Modster, Anthony]

? is there a possibility of a patch to allow checking the received nonce

-----Original Message-----
From: Tobias Brunner <tobias at strongswan.org> 
Sent: Thursday, November 07, 2019 11:27 PM
To: Modster, Anthony <Anthony.Modster at Teledyne.com>; users at lists.strongswan.org
Subject: Re: [strongSwan] OCSP nonce parameter

---External Email---

Hi Anthony,

> When using OCSP, ? is the nonce parameter always set.

Yes, the x509 plugin always adds a random nonce.  It doesn't seem to be used/checked later, though.

Regards,
Tobias